spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ted Mittelstaedt <>
Subject Re: Honeypot email addresses
Date Sat, 22 Nov 2014 21:05:55 GMT
That's a lot of work, there's a much easier way

Just search your /var/log/maillog for user unknown messages, and
create email addresses for the unknown users which are showing up
multiple times over multiple days.  It's a great trick because it gets 
spammers who already have email addresses in their
spamlists and who are too lazy to remove them when they get a
user unknown message from the mailserver.

I have a pretty old domain - I've seen user unknown messages for
users who cancelled mailboxes on the domain over a decade ago.  I figure
10 years of getting user unknown messages is long enough for any real
humans and for legitimate mailing lists to remove those entries.


On 11/21/2014 8:10 AM, Joe Quinn wrote:
> We are setting up some honeypot email addresses, and were wondering if
> anyone here had tips on how to include those addresses on webpages and
> other places.
> We're currently going with a pretty simple <!-- -->
> HTML comment. Is that too obvious? Should we put it into a CSS invisible
> div as well? Any other ideas?

View raw message